local-history-mcp

The server primarily operates on local file system data, specifically editor history. File paths provided as arguments are explicitly checked for absolute paths and normalized to prevent path traversal. Regex creation for search functionality is sanitized. Communication occurs via standard I/O (stdio), limiting direct network exposure. The `restore_from_history` tool includes a backup option, which is a good safety measure. The main security considerations would be the potential for an AI agent to misuse the restore feature if not properly constrained, but this falls more on the agent's permissioning than a vulnerability in the server itself.